Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
File: sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft (raw, json)
Hash identifier: 3A2b9dBgoRxP2HRF2VUuZ1KBgmMOozPP88aXJqSAUlg=
Subject key identifier: 68:0C:C6:DC:F0:92:5F:F5:4C:46:16:26:0A:FE:8F:E2:04:B2:2D:C8
Authority key identifier: B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
Certificate issuer: /CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Certificate serial: 019D33E42F6C1C8DCDA62AC4555655D5C2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
Manifest number: 11F9
Signing time: Sat 28 Mar 2026 10:01:25 +0000
Manifest this update: Sat 28 Mar 2026 10:01:25 +0000
Manifest next update: Sun 29 Mar 2026 10:01:25 +0000
Files and hashes: 1: IFU9yqMojf3OF6XRbPbAyfRClxk.roa (hash: 35a15I7jZQOPlqYRrp7fhGZKGwSIuTjFX5WUsqtUd2U=)
2: sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl (hash: eUjQ2wcT8fJOdT0bfVjl52uA/d7aM9FuNWBD5SBqb6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e4:2f:6c:1c:8d:cd:a6:2a:c4:55:56:55:d5:c2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Validity
Not Before: Mar 28 10:01:25 2026 GMT
Not After : Mar 29 10:01:25 2026 GMT
Subject: CN=680cc6dcf0925ff54c4616260afe8fe204b22dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:09:2c:28:97:06:4e:21:b2:37:d6:65:e6:
e2:31:f4:d4:ca:ce:e9:9b:70:a2:47:68:ec:b5:1d:
3f:b4:fb:b9:7b:57:76:ac:52:06:42:5f:c8:29:d9:
63:61:ec:42:b6:c2:6d:4f:21:51:e2:ec:5f:d9:f2:
ed:de:d1:5d:aa:b2:3c:55:57:13:a9:fd:fa:f1:2b:
d5:60:97:74:d8:4d:1c:d7:0c:2a:84:9e:00:b4:e8:
5a:28:61:3e:bc:1c:64:fc:db:24:9d:a8:3a:fd:20:
a4:e3:68:79:93:88:0b:5d:1c:8e:db:7b:eb:3a:c8:
5b:24:3a:2c:17:a9:99:b1:91:6d:6d:c6:89:90:7a:
ea:4d:37:33:41:fe:f3:91:8b:b5:ed:64:ed:8c:6e:
42:ac:9d:6d:99:e4:d8:fc:87:a6:38:b0:df:5e:8d:
81:dd:ea:78:42:ec:62:c7:18:54:36:0e:fc:92:b7:
41:0b:9c:5f:09:e8:b9:90:37:47:30:11:df:a3:f4:
7b:b3:1b:0e:bc:f2:7f:f0:ba:e7:ba:97:6c:73:61:
22:96:96:49:3a:4d:d0:f9:d4:19:04:f6:5f:09:94:
76:26:33:8f:ed:86:84:b0:0f:d3:75:c1:a5:8a:ac:
64:64:35:28:aa:58:11:d9:e2:43:b9:75:97:45:22:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0C:C6:DC:F0:92:5F:F5:4C:46:16:26:0A:FE:8F:E2:04:B2:2D:C8
X509v3 Authority Key Identifier:
keyid:B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:81:6d:7a:24:bb:db:19:3c:cf:5e:43:84:01:7a:45:bd:dc:
c7:41:10:d4:ad:f2:c5:ac:b7:66:1e:a4:c2:f8:72:19:fa:df:
51:34:a3:03:6b:57:71:b8:c8:e7:92:6c:59:46:95:b1:78:e1:
65:f2:51:e6:63:ac:d5:53:e5:e8:34:39:bc:cd:2e:8e:62:5d:
20:3d:b1:0b:e0:06:89:b8:49:44:10:5e:4e:36:a4:81:95:a3:
a4:b1:f3:10:47:d3:fc:e9:05:43:a9:1c:ee:f7:31:6f:3d:b9:
22:98:35:23:0b:a1:43:20:9d:4e:4e:ec:50:81:f5:74:20:4a:
8a:1b:59:dc:21:1f:e6:e7:47:6e:b6:33:5f:bf:53:82:48:18:
a7:3d:d6:9a:70:75:90:73:e9:ea:6d:ea:9a:ba:2b:a6:7e:84:
6a:55:93:04:36:fe:52:16:02:35:fb:21:1b:dc:53:97:8c:ed:
a0:15:36:e7:d0:cb:77:00:f7:2a:4d:47:53:ba:5d:08:93:d2:
42:bf:31:95:f7:fe:98:7b:b5:65:0c:fa:b2:d0:31:a4:19:ea:
d1:fb:9b:8a:2f:2c:87:a5:c7:1c:cc:e6:53:d3:d3:f9:4c:17:
6c:e4:cf:ef:23:64:79:42:4f:0e:2d:71:ae:8e:1f:4a:22:1d:
42:20:a8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:03:01 2026 by rpki-client